This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json) Hash identifier: uGe+yHQsBPbvBn4gpnvtjeXz7QAeOvl0zrm9mxkvBuU= Subject key identifier: 86:D0:6E:EE:54:51:18:84:18:74:44:80:C9:74:AC:5B:4B:B9:21:24 Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Certificate serial: 019C446BE8407080E415C081E35FFCC01567 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft Manifest number: 0AE2 Signing time: Mon 09 Feb 2026 22:00:48 +0000 Manifest this update: Mon 09 Feb 2026 22:00:48 +0000 Manifest next update: Tue 10 Feb 2026 22:00:48 +0000 Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: AmLxd4DIQLHEUjQXxsjkb2jCFuqpb6z/RCiJpE+E1a4=) 2: v9xxAs53z8-Lo-M8MAasS_fTI5w.roa (hash: W5P7f8MNnL6/RnaFt8r/SNRF065+Vy7YUi1ouIgirhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:e8:40:70:80:e4:15:c0:81:e3:5f:fc:c0:15:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e Validity Not Before: Feb 9 22:00:48 2026 GMT Not After : Feb 10 22:00:48 2026 GMT Subject: CN=86d06eee5451188418744480c974ac5b4bb92124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f6:d3:98:e1:93:0a:96:ba:66:57:88:17:ab: 66:30:54:cd:50:3b:dd:eb:68:21:3e:b4:e8:18:e2: 1a:08:6a:57:e6:22:26:a0:2d:a8:c4:5a:af:95:e6: ef:db:1e:84:d4:bb:58:49:c3:e9:3b:f7:b9:22:39: 36:5d:c5:a8:bd:14:e5:3d:92:d6:16:39:45:1f:92: 2b:40:e1:2f:b4:d5:3e:7a:cd:ac:80:17:be:87:8a: 4a:f7:8d:f0:e9:2f:37:0b:46:59:72:89:74:eb:db: e7:ca:af:e1:3a:4b:25:dc:70:0c:58:aa:be:b3:b9: a5:4f:ef:d4:0c:64:99:e7:e8:f4:63:df:82:1b:aa: a2:be:93:6d:62:08:65:ee:e6:97:29:2e:4f:a3:3f: 6a:5f:9c:e7:e5:01:8a:62:f1:b6:59:0a:38:07:49: c9:57:b4:f9:e1:0f:e5:7c:66:5c:2f:8c:4d:32:dc: 27:b5:2f:73:29:08:36:b2:3a:d0:87:a6:95:6e:1c: 3b:25:83:30:b3:6b:08:55:02:7a:3e:f4:f7:4b:28: 2e:74:3b:1a:81:1b:64:e1:e5:42:46:c5:48:4b:19: c0:01:46:37:e0:4f:ba:af:d3:2d:c7:fc:63:dc:4f: 09:43:24:40:6b:86:32:04:58:1b:1c:4c:43:c3:2e: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D0:6E:EE:54:51:18:84:18:74:44:80:C9:74:AC:5B:4B:B9:21:24 X509v3 Authority Key Identifier: keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:92:74:38:b1:72:3c:a0:99:03:b2:72:97:20:d5:e9:61:c8: fb:8f:ef:f7:3c:68:5d:f8:88:00:2f:38:e9:9a:1a:64:02:eb: 2c:46:f4:cf:08:01:de:c1:ad:0f:e2:04:d8:e0:19:11:19:57: d0:98:1c:0a:05:5b:82:d3:37:85:f7:ea:73:8d:d4:ca:0d:36: 3a:2c:10:df:ca:f2:33:9f:78:96:c9:75:e9:40:ec:02:37:ce: 16:95:7b:d1:6a:bb:70:57:f6:91:f5:17:25:a4:4e:93:63:50: 45:9d:1c:12:79:25:02:eb:3e:54:e3:e4:b9:d8:2b:6d:c7:ae: ab:21:18:40:38:98:c2:64:9c:01:f5:67:fa:b2:31:ab:2c:c1: 93:ea:0e:82:e0:61:eb:bf:02:d5:69:be:97:72:fa:10:c6:2d: ae:3b:55:e6:1d:5b:d2:23:ba:96:b1:da:0d:20:02:2a:97:68: 22:9f:38:df:bc:d0:ed:bf:6b:b0:d7:5f:f7:96:39:d1:10:8f: c1:f1:e4:b9:13:44:ea:50:cf:79:0f:c7:d8:a9:3b:3b:2c:5d: a8:ba:11:1d:db:d9:2e:52:df:5e:97:2e:9b:8e:cc:4a:d3:ef: 4f:1b:e0:59:c2:28:03:ea:41:34:d2:31:57:0a:18:be:e6:f9: 17:bd:e9:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa+hAcIDkFcCB41/8wBVnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjJiOWI1OGVlMDhlODNmMWE5YWQ0ZTk2NDNlODBkM2I0 MGNiM2UwHhcNMjYwMjA5MjIwMDQ4WhcNMjYwMjEwMjIwMDQ4WjAzMTEwLwYDVQQD Eyg4NmQwNmVlZTU0NTExODg0MTg3NDQ0ODBjOTc0YWM1YjRiYjkyMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/bTmOGTCpa6ZleIF6tmMFTNUDvd 62ghPrToGOIaCGpX5iImoC2oxFqvlebv2x6E1LtYScPpO/e5Ijk2XcWovRTlPZLW FjlFH5IrQOEvtNU+es2sgBe+h4pK943w6S83C0ZZcol069vnyq/hOksl3HAMWKq+ s7mlT+/UDGSZ5+j0Y9+CG6qivpNtYghl7uaXKS5Poz9qX5zn5QGKYvG2WQo4B0nJ V7T54Q/lfGZcL4xNMtwntS9zKQg2sjrQh6aVbhw7JYMws2sIVQJ6PvT3SygudDsa gRtk4eVCRsVISxnAAUY34E+6r9Mtx/xj3E8JQyRAa4YyBFgbHExDwy7hjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbQbu5UURiEGHREgMl0rFtLuSEkMB8GA1UdIwQY MBaAFARiubWO4I6D8amtTpZD6A07QMs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYt MGVlMmVhN2Q0ODg0LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYtMGVlMmVhN2Q0ODg0 LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZJ0OLFy PKCZA7JylyDV6WHI+4/v9zxoXfiIAC846ZoaZALrLEb0zwgB3sGtD+IE2OAZERlX 0JgcCgVbgtM3hffqc43Uyg02OiwQ38ryM594lsl16UDsAjfOFpV70Wq7cFf2kfUX JaROk2NQRZ0cEnklAus+VOPkudgrbceuqyEYQDiYwmScAfVn+rIxqyzBk+oOguBh 678C1Wm+l3L6EMYtrjtV5h1b0iO6lrHaDSACKpdoIp8437zQ7b9rsNdf95Y50RCP wfHkuRNE6lDPeQ/H2Kk7OyxdqLoRHdvZLlLfXpcum47MStPvTxvgWcIoA+pBNNIx VwoYvub5F73pWA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:13 2026 by rpki-client